Arch Linux

Description:

When running unbound and a stub zone is declared with stub-no-cache option enabled.

It's not working as expected in many attempt the answer is coming directly from unbound itself.

Additional info:
* 1.8.1-1
* Config file

stub-zone:
name: "archlinux.org"
stub-addr: 213.239.242.238
stub-addr: 213.133.105.6
stub-addr: 193.47.99.3
stub-no-cache: yes

And one ACL to be able to query unbound from my own machine, everything else is left by default (config file shipped with the package)

Steps to reproduce:

$ dig @127.0.0.1 archlinux.org

; <<>> DiG 9.13.4 <<>> @127.0.0.1 archlinux.org
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39914
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;archlinux.org. IN A

;; ANSWER SECTION:
archlinux.org. 3582 IN A 138.201.81.199

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: sam. déc. 01 13:04:53 CET 2018
;; MSG SIZE rcvd: 58

$ dig @127.0.0.1 archlinux.org

; <<>> DiG 9.13.4 <<>> @127.0.0.1 archlinux.org
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 32966
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;archlinux.org. IN A

;; ANSWER SECTION:
archlinux.org. 3563 IN A 138.201.81.199

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: sam. déc. 01 13:05:12 CET 2018
;; MSG SIZE rcvd: 58

Fix:

After digging on how the package was built, I found that the option which is causing this bad effect is --enable-subnet

I disabled it and try again:

$ dig @127.0.0.1 archlinux.org

; <<>> DiG 9.13.4 <<>> @127.0.0.1 archlinux.org
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52962
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;archlinux.org. IN A

;; ANSWER SECTION:
archlinux.org. 3600 IN A 138.201.81.199

;; Query time: 22 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: sam. déc. 01 13:06:38 CET 2018
;; MSG SIZE rcvd: 58

$ dig @127.0.0.1 archlinux.org

; <<>> DiG 9.13.4 <<>> @127.0.0.1 archlinux.org
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58086
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;archlinux.org. IN A

;; ANSWER SECTION:
archlinux.org. 3600 IN A 138.201.81.199

;; Query time: 25 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: sam. déc. 01 13:06:39 CET 2018
;; MSG SIZE rcvd: 58

Is it possible to delete this option ?

Regards,